flowtools not storing netflow on Solaris

Post support questions that directly relate to Linux/Unix operating systems.

Moderators: Moderators, Developers

Post Reply
Author
Message
kaf3773
Posts: 21
Joined: Sun Sep 09, 2012 8:48 pm

flowtools not storing netflow on Solaris

#1 Post by kaf3773 » Thu Jun 20, 2013 7:05 pm

Hi

I have Cacti installed on Solaris 10 and i have successfully installed Flowview plugin.

I also installed flowtools to collect netflow data. I can verify netflow data is arriving at the Cacti server
by using tcpdump

# /opt/csw/sbin/tcpdump udp port 2055
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on bge0, link-type EN10MB (Ethernet), capture size 65535 bytes
20:02:22.384563 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:23.385786 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:24.384528 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:25.384639 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:26.386363 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:27.385605 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:28.385700 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:29.389188 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:30.388107 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:31.386843 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:32.385816 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:33.385813 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:34.385787 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:35.386031 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
20:02:36.387916 IP 192.168.9.6.1152 > VNoC-slrs-1.2055: UDP, length 72
^C
15 packets captured
293 packets received by filter
0 packets dropped by kernel
#

My problem is there are no netflow files written into the netflow directory
i specified under "Listeners"

Is there a flowtools daemon that must be running and how do i start it?

Help will be very much appreciated. Thanks

Post Reply